Traffic Trace Info
DumpFile: 200803172345.dump
FileSize: 1025.23MB
Id: 200803172345
StartTime: Mon Mar 17 23:45:00 2008
EndTime: Tue Mar 18 00:00:00 2008
TotalTime: 899.70 seconds
TotalCapSize: 805.40MB CapLen: 96 bytes
# of packets: 14405984 (6932.26MB)
AvgRate: 64.63Mbps stddev:9.81M
IP flow (unique src/dst pair) Information
# of flows: 758317 (avg. 19.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 3.2% 1.3% 1.2% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 407389
Top 10 bandwidth usage (bytes/total in %):
13.8% 12.0% 9.6% 8.1% 5.7% 5.2% 3.8% 3.3% 2.4% 2.4%
# of IPv6 addresses: 1798
Top 10 bandwidth usage (bytes/total in %):
16.8% 13.8% 9.0% 6.2% 5.8% 5.8% 4.9% 4.6% 4.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803172345.pktlen.png)
detailed numbers
[ 32- 63]: 2980247
[ 64- 127]: 5369742
[ 128- 255]: 1131989
[ 256- 511]: 389890
[ 512- 1023]: 378052
[ 1024- 2047]: 4156064
Protocol Breakdown
![[protocol breakdown chart]](200803172345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 14405984 (100.00%) 7268996606 (100.00%) 504.58
ip 14379773 ( 99.82%) 7264470376 ( 99.94%) 505.19
tcp 11311578 ( 78.52%) 6627516113 ( 91.18%) 585.91
http(s) 2919138 ( 20.26%) 3966692876 ( 54.57%) 1358.86
http(c) 1935018 ( 13.43%) 173292091 ( 2.38%) 89.56
squid 483903 ( 3.36%) 281006164 ( 3.87%) 580.71
smtp 959992 ( 6.66%) 142195678 ( 1.96%) 148.12
ftp 191606 ( 1.33%) 31974695 ( 0.44%) 166.88
pop3 10588 ( 0.07%) 7725564 ( 0.11%) 729.65
imap 6037 ( 0.04%) 1307146 ( 0.02%) 216.52
telnet 2 ( 0.00%) 120 ( 0.00%) 60.00
ssh 2013759 ( 13.98%) 336052152 ( 4.62%) 166.88
dns 2219 ( 0.02%) 194897 ( 0.00%) 87.83
bgp 220 ( 0.00%) 60788 ( 0.00%) 276.31
napster 35 ( 0.00%) 4190 ( 0.00%) 119.71
realaud 2 ( 0.00%) 120 ( 0.00%) 60.00
rtsp 1797 ( 0.01%) 143805 ( 0.00%) 80.03
icecast 12815 ( 0.09%) 15225792 ( 0.21%) 1188.12
hotline 4809 ( 0.03%) 334986 ( 0.00%) 69.66
other 2769638 ( 19.23%) 1671305049 ( 22.99%) 603.44
udp 2114036 ( 14.67%) 554963756 ( 7.63%) 262.51
dns 1225904 ( 8.51%) 179006947 ( 2.46%) 146.02
realaud 1872 ( 0.01%) 113351 ( 0.00%) 60.55
halflif 23 ( 0.00%) 2048 ( 0.00%) 89.04
starcra 20 ( 0.00%) 3492 ( 0.00%) 174.60
everque 20 ( 0.00%) 3400 ( 0.00%) 170.00
unreal 210 ( 0.00%) 13433 ( 0.00%) 63.97
quake 17 ( 0.00%) 2137 ( 0.00%) 125.71
cuseeme 8 ( 0.00%) 1062 ( 0.00%) 132.75
other 885913 ( 6.15%) 375795008 ( 5.17%) 424.19
icmp 943027 ( 6.55%) 80430319 ( 1.11%) 85.29
ipip 342 ( 0.00%) 42876 ( 0.00%) 125.37
ip6 1104 ( 0.01%) 150768 ( 0.00%) 136.57
other 9686 ( 0.07%) 1366544 ( 0.02%) 141.08
frag 2250 ( 0.02%) 2020939 ( 0.03%) 898.20
ip6 26211 ( 0.18%) 4526230 ( 0.06%) 172.68
tcp6 4160 ( 0.03%) 592075 ( 0.01%) 142.33
http(s) 49 ( 0.00%) 16046 ( 0.00%) 327.47
http(c) 1333 ( 0.01%) 130958 ( 0.00%) 98.24
smtp 551 ( 0.00%) 159841 ( 0.00%) 290.09
pop3 38 ( 0.00%) 3510 ( 0.00%) 92.37
bgp 67 ( 0.00%) 7135 ( 0.00%) 106.49
other 2122 ( 0.01%) 274585 ( 0.00%) 129.40
udp6 16960 ( 0.12%) 3231542 ( 0.04%) 190.54
dns 15218 ( 0.11%) 2811501 ( 0.04%) 184.75
other 1742 ( 0.01%) 420041 ( 0.01%) 241.13
icmp6 5061 ( 0.04%) 698533 ( 0.01%) 138.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
tcpdump file: 200803172345.dump.gz (396.64 MB)